ITX8062 - Redigeerimiste ajalugu

Ottis: /* Tabletop Exercise (practice component) */

2013-09-11T16:25:34Z

Tabletop Exercise (practice component)

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:25
1. rida:		1. rida:
	Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].		Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].

	~~==Tabletop Exercise (practice component)==~~

	It's game time! In this part of the course we will learn about war games. We will discuss their importance and practical applications in the real world and see how those games are organized. We will not only talk about them, but we will try them out as well.

	The goal of this is to analyse the importance of communication processes and to understand the need to test those processes using tabletop exercises. We will create different teams with different tasks that will fall into two main categories: Red teams and Blue teams.

	~~To the blue teams we will show that you might not have the full understanding of the situation, not enough information and resources.~~

	~~To the red teams we will show that even though you might have a perfect plan, things will not go as you would want them to go.~~

	~~===Agenda===~~
	~~====Lesson 2====~~
	~~Introduction~~

	~~Processes and testing~~

	~~Examples of different exercises and games from real life~~

	~~====Lesson 3====~~
	~~Creating teams, assigning roles~~

	~~Introducing scenarios and injects~~

	~~Playing the first game to understand what we are doing~~

	~~====Lesson 4====~~
	~~Playing the first game with scenarios and injects~~

	~~Analysing the game and reports~~

	~~====Lesson 5====~~
	~~Discussing self-written scenarios and injects~~

	~~Explaining the "final game" and the methods~~

	~~====Lesson 7====~~
	~~Final game~~

	~~====Lesson 8====~~
	~~Feedback~~

	~~===General information===~~
	Red teams will get to do less during the class exercises. However - their performance during the last exercise will be watched and graded with more detail. It requires much more independent work from the team to prepare.

	~~If you have questions, comments or ideas about the topic then you can contact me via e-mail hallas at ut dot ee.~~

Ottis: /* Grade assignment */

2013-09-11T16:25:28Z

Grade assignment

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:25
1. rida:		1. rida:
	Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].		Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].

	~~==Grade assignment==~~

	~~30% - Performance at the tabletop exercises~~

	~~30% - Written assignment (research paper, 2000-4000 words)~~

	~~40% - Oral exam~~

	==Tabletop Exercise (practice component)==		==Tabletop Exercise (practice component)==

Ottis: /* Schedule */

2013-09-11T16:25:22Z

Schedule

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:25
1. rida:		1. rida:
	Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].		Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].

	~~==Schedule==~~

	~~<b> NB! Check the schedule for updates before each lesson. </b>~~

	~~====Lesson 1====~~
	~~03.09.2013~~

	~~Introduction (Priisalu, Hallas)~~

	~~Research paper topic assignment (Priisalu, Hallas)~~


	~~====Lesson 2====~~
	~~10.09.2013~~

	~~Review of research paper requirements (Ottis)~~

	~~'''Lecture:''' cyber conflict and espionage (Ottis)~~

	~~Topics covered: Estonia 2007 and Georgia 2008 cyber conflicts, StuxNet, PRISM, discussion.~~

	~~'''Practice''' (Hallas)~~

	~~Topics covered: overview of exercises, introduction of tabletop exercises in the context of this course, explaining the need for processes based on the real life examples.~~


	~~====Lesson 3====~~
	~~17.09.2013~~

	~~'''Lecture:''' cyber crime (Ottis, Priisalu)~~

	~~Topics covered: criminal attacks, experiences from the banking sector, attack methods, motives, cooperation.~~

	~~'''Practice''' (Hallas)~~

	~~Topics covered: Creating teams, assigning team roles, introducing scenarios and injects, playing the first game.~~


	~~====Lesson 4====~~
	~~24.09.2013~~

	~~'''Lecture:''' politically motivated attacks (Ottis)~~

	~~Topics covered: hactivism, private hacking for political reasons, state sponsored cyber attacks, cyber espionage and terrorism, methods, motives, countermeasures.~~

	~~'''Practice''' (Hallas)~~

	~~Topics covered: Analysing the last game, playing by scenarios and with injects~~


	~~====Lesson 5====~~
	~~01.10.2013~~

	~~'''Lecture:''' cyber security planning (Priisalu)~~

	~~Topics covered: cyber security planning.~~

	~~'''Practice''' (Hallas)~~

	~~Topics covered: Explaining “the final game”, discussing self-written scenarios.~~


	~~====Lesson 6====~~
	~~08.10.2013~~

	~~'''Lecture:''' incident handling and CIIP (Priisalu)~~

	~~Topics covered: CIIP overall, CIIP in Estonia, crisis management, CERT perspective, law enforcement perspective, incident handling process in Estonia.~~


	~~====Lesson 7====~~
	~~15.10.2013~~

	~~'''Practice''' (Hallas, Ottis, Priisalu)~~

	~~Tabletop exercise~~


	~~====Lesson 8====~~
	~~22.09.2013~~

	~~Course summary and feedback (Ottis, Priisalu, Hallas)~~

	==Grade assignment==		==Grade assignment==

Ottis: /* Instructors */

2013-09-11T16:25:14Z

Instructors

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:25
1. rida:		1. rida:
	Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].		Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].

	~~==Instructors==~~

	~~[http://www.linkedin.com/in/rainottis Rain Ottis], PhD, Associate Professor at TUT~~

	~~Jaan Priisalu, Director General, [http://www.ria.ee Estonian Information System's Authority]~~

	~~Practice led by Tiit Hallas~~


	~~Contact: rain dot ottis at ttu dot ee~~

	==Schedule==		==Schedule==

Ottis: /* Information Systems Mass Attacks and Defence (fall 2013) */

2013-09-11T16:25:04Z

Information Systems Mass Attacks and Defence (fall 2013)

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:25
1. rida:		1. rida:
	==Information Systems Mass Attacks and Defence ~~(fall 2013) ==~~		Information Systems Mass Attacks and Defence wiki has [http://courses.cs.ttu.ee/pages/ITX8062 moved to a new location].

	~~Weeks 1-8 of the Fall Semester~~

	~~Tuesdays 17~~:~~45-21:00~~

	~~Room ICT-A1 (~~new ~~IT building at Akadeemia 15a, second floor)~~

	==Instructors==		==Instructors==

Ottis: /* EXAM */

2013-09-11T16:24:52Z

EXAM

←Vanem redaktsioon		Redaktsioon: 11. september 2013, kell 18:24
154. rida:		154. rida:

	If you have questions, comments or ideas about the topic then you can contact me via e-mail hallas at ut dot ee.		If you have questions, comments or ideas about the topic then you can contact me via e-mail hallas at ut dot ee.

	~~==EXAM==~~

	~~===Exam times===~~

	~~<b>~~
	~~- TBD (December/January)~~

	~~- Send in your exam time preference and paper at least one week before the exam date!~~
	~~- Be present at the beginning of the exam!~~
	~~- You are allowed to use your computer during the exam.~~
	~~</b>~~

	~~Check this wiki for updates on the location of the exam.~~

Ottis: /* Instructors */

2013-08-29T12:56:42Z

Instructors

←Vanem redaktsioon		Redaktsioon: 29. august 2013, kell 14:56
9. rida:		9. rida:
	==Instructors==		==Instructors==

	Rain Ottis, PhD, Associate Professor at TUT		[http://www.linkedin.com/in/rainottis Rain Ottis], PhD, Associate Professor at TUT

	Jaan Priisalu, Director General, [http://www.ria.ee Estonian Information System's Authority]		Jaan Priisalu, Director General, [http://www.ria.ee Estonian Information System's Authority]

Ottis: /* General information */

2013-08-28T12:39:14Z

General information

←Vanem redaktsioon		Redaktsioon: 28. august 2013, kell 14:39
153. rida:		153. rida:
	Red teams will get to do less during the class exercises. However - their performance during the last exercise will be watched and graded with more detail. It requires much more independent work from the team to prepare.		Red teams will get to do less during the class exercises. However - their performance during the last exercise will be watched and graded with more detail. It requires much more independent work from the team to prepare.

	If you have questions, comments or ideas about the topic then you can contact me via e-mail hallas@ut.ee.		If you have questions, comments or ideas about the topic then you can contact me via e-mail hallas at ut dot ee.

	==EXAM==		==EXAM==

Ottis: /* Schedule */

2013-08-28T12:36:29Z

Schedule

←Vanem redaktsioon		Redaktsioon: 28. august 2013, kell 14:36
22. rida:		22. rida:
	<b> NB! Check the schedule for updates before each lesson. </b>		<b> NB! Check the schedule for updates before each lesson. </b>

			====Lesson 1====
	~~1. '''~~03.09.2013~~'''~~		03.09.2013

	Introduction (Priisalu, Hallas)		Introduction (Priisalu, Hallas)
30. rida:		30. rida:


	2~~. '''~~10.09.2013 ~~'''~~		====Lesson 2====
			10.09.2013

	Review of research paper requirements (Ottis)		Review of research paper requirements (Ottis)

			'''Lecture:''' cyber conflict and espionage (Ottis)
	Lecture: cyber conflict and espionage (Ottis)

	Topics covered: Estonia 2007 and Georgia 2008 cyber conflicts, StuxNet, PRISM, discussion.		Topics covered: Estonia 2007 and Georgia 2008 cyber conflicts, StuxNet, PRISM, discussion.

			'''Practice''' (Hallas)
	Practice (Hallas)

	Topics covered: overview of exercises, introduction of tabletop exercises in the context of this course, explaining the need for processes based on the real life examples.		Topics covered: overview of exercises, introduction of tabletop exercises in the context of this course, explaining the need for processes based on the real life examples.


	3~~. '''~~17.09.2013~~'''~~		====Lesson 3====
			17.09.2013

	Lecture: cyber crime (Ottis, Priisalu)		'''Lecture:''' cyber crime (Ottis, Priisalu)

	Topics covered: criminal attacks, experiences from the banking sector, attack methods, motives, cooperation.		Topics covered: criminal attacks, experiences from the banking sector, attack methods, motives, cooperation.

			'''Practice''' (Hallas)
	Practice (Hallas)

	Topics covered: Creating teams, assigning team roles, introducing scenarios and injects, playing the first game.		Topics covered: Creating teams, assigning team roles, introducing scenarios and injects, playing the first game.


	4~~. '''~~24.09.2013~~'''~~		====Lesson 4====
			24.09.2013

	Lecture: politically motivated attacks (Ottis)		'''Lecture:''' politically motivated attacks (Ottis)

	Topics covered: hactivism, private hacking for political reasons, state sponsored cyber attacks, cyber espionage and terrorism, methods, motives, countermeasures.		Topics covered: hactivism, private hacking for political reasons, state sponsored cyber attacks, cyber espionage and terrorism, methods, motives, countermeasures.

			'''Practice''' (Hallas)
	Practice (Hallas)

	Topics covered: Analysing the last game, playing by scenarios and with injects		Topics covered: Analysing the last game, playing by scenarios and with injects


	5~~. '''~~01.10.2013~~'''~~		====Lesson 5====
			01.10.2013

	Lecture: cyber security planning (Priisalu)		'''Lecture:''' cyber security planning (Priisalu)

	Topics covered: cyber security planning.		Topics covered: cyber security planning.

			'''Practice''' (Hallas)
	Practice (Hallas)

	Topics covered: Explaining “the final game”, discussing self-written scenarios.		Topics covered: Explaining “the final game”, discussing self-written scenarios.


	6~~. '''~~08.10.2013~~'''~~		====Lesson 6====
			08.10.2013

	Lecture: incident handling and CIIP (Priisalu)		'''Lecture:''' incident handling and CIIP (Priisalu)

	Topics covered: CIIP overall, CIIP in Estonia, crisis management, CERT perspective, law enforcement perspective, incident handling process in Estonia.		Topics covered: CIIP overall, CIIP in Estonia, crisis management, CERT perspective, law enforcement perspective, incident handling process in Estonia.


	7~~. '''~~15.10.2013'''		====Lesson 7====
			15.10.2013

			'''Practice''' (Hallas, Ottis, Priisalu)

	Tabletop exercise ~~(Hallas, Ottis, Priisalu)~~		Tabletop exercise


	8~~. '''~~22.09.2013~~'''~~		====Lesson 8====
			22.09.2013

	Course summary and feedback (Ottis, Priisalu, Hallas)		Course summary and feedback (Ottis, Priisalu, Hallas)

Ottis: /* Main lecturers */

2013-08-28T12:28:37Z

Main lecturers

←Vanem redaktsioon		Redaktsioon: 28. august 2013, kell 14:28
7. rida:		7. rida:
	Room ICT-A1 (new IT building at Akadeemia 15a, second floor)		Room ICT-A1 (new IT building at Akadeemia 15a, second floor)

	==~~Main lecturers~~==		==Instructors==

	Rain Ottis, PhD, Associate Professor at TUT		Rain Ottis, PhD, Associate Professor at TUT